This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yw78i8gkf5mgEoB0HkoaDbfxR7A.cer File: Yw78i8gkf5mgEoB0HkoaDbfxR7A.cer (raw, json) Hash identifier: cZcPZaxrCRU7q02ZCRR73yuIkz99wpHg9Pq7/HuZlNU= Subject key identifier: 63:0E:FC:8B:C8:24:7F:99:A0:12:80:74:1E:4A:1A:0D:B7:F1:47:B0 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7219 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft caRepository: rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 12 Jan 2026 14:06:36 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 157.10.140.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 10:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29209 (0x7219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 12 14:06:36 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91BB629, serialNumber=630EFC8BC8247F99A01280741E4A1A0DB7F147B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:93:1a:16:6b:55:00:7e:10:7d:bc:82:27:e9: 31:7a:5a:3c:56:76:96:ad:94:01:3e:d7:e7:65:37: fd:5d:da:f2:ce:f3:2d:6c:67:ca:dc:03:3c:64:bb: 73:81:36:e3:de:19:8e:27:38:4b:92:d9:05:1c:92: 2c:56:a1:83:2f:2e:00:b9:71:4a:b4:9f:eb:5e:91: d3:2e:c3:e8:9a:67:85:27:b7:8c:78:1b:d8:23:50: 8c:7c:4b:78:34:f9:c9:73:fc:90:9e:b7:8a:c7:8b: d3:94:b5:ea:be:31:e4:18:38:c6:c2:1a:6e:45:d0: 04:6c:40:b1:ef:89:91:6c:25:99:52:a8:56:cd:ad: 23:73:e8:79:a9:f9:88:74:c8:17:71:2d:dc:d5:66: 9f:c7:83:1b:55:5a:69:61:5a:50:7a:44:14:92:f0: 04:58:a2:91:ff:83:83:de:e4:18:03:3a:15:62:8a: 9a:8a:a2:56:86:45:99:d5:1d:1c:01:a5:39:fb:49: 2f:1b:83:41:6d:4f:8a:d1:45:27:c3:4c:e2:11:5e: bf:b7:02:ec:e7:c4:93:ba:11:51:31:43:03:3f:42: 7d:57:ec:9d:0f:25:5c:cd:dc:b1:71:fe:1c:ea:f2: 27:3a:ed:e4:2c:47:e7:6e:de:f1:c7:7a:a7:a6:70: 20:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0E:FC:8B:C8:24:7F:99:A0:12:80:74:1E:4A:1A:0D:B7:F1:47:B0 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.140.0/23 Signature Algorithm: sha256WithRSAEncryption 83:64:0c:1e:52:e0:52:13:93:4d:ca:8e:59:95:21:d1:9f:f8: 83:64:fc:57:cc:5f:bb:6e:2e:65:1d:51:01:0a:cd:b5:3c:93: 8c:35:fb:5f:61:e3:4c:38:64:be:61:1b:bc:bb:b5:b2:12:85: d6:92:cd:5c:bd:0e:76:1b:82:6c:14:68:e9:a8:bd:43:dd:fc: f8:c8:7b:95:44:fd:ca:01:e9:56:0b:cd:47:ef:c5:4f:b9:70: 12:5a:f2:42:a8:e5:59:26:24:e9:eb:4d:6d:ab:f7:1b:65:50: 57:fa:17:5f:0c:78:57:09:9f:b4:4a:17:3f:20:6b:f3:c3:a0: 65:e6:2e:f2:2d:f2:ae:0e:30:86:bf:f9:d8:9b:b5:be:0c:6c: 03:de:6b:27:02:9c:0c:af:6a:2b:73:72:78:65:02:7e:81:c6: c6:63:1d:70:6a:cd:3f:de:a7:42:e9:0a:1b:a4:4a:4c:17:90: 82:95:26:d3:00:22:52:04:55:30:40:6b:ab:49:72:36:ad:e7: d3:fc:a7:15:ef:6e:1f:55:e4:a5:22:a8:9b:2b:03:39:88:c3: 57:bc:51:32:bc:af:79:8e:6b:7c:7a:a1:94:cc:81:97:59:dd: 9c:7f:22:22:4a:2f:b8:06:ee:d6:c1:f9:96:e9:71:f1:1b:17: 44:32:29:66 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICchkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTEyMTQwNjM2WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDDAhBOTFCQjYyOTExMC8GA1UEBRMoNjMwRUZDOEJDODI0N0Y5OUEwMTI4MDc0 MUU0QTFBMERCN0YxNDdCMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMSTGhZrVQB+EH28gifpMXpaPFZ2lq2UAT7X52U3/V3a8s7zLWxnytwDPGS7c4E2 494Zjic4S5LZBRySLFahgy8uALlxSrSf616R0y7D6JpnhSe3jHgb2CNQjHxLeDT5 yXP8kJ63iseL05S16r4x5Bg4xsIabkXQBGxAse+JkWwlmVKoVs2tI3Poean5iHTI F3Et3NVmn8eDG1VaaWFaUHpEFJLwBFiikf+Dg97kGAM6FWKKmoqiVoZFmdUdHAGl OftJLxuDQW1PitFFJ8NM4hFev7cC7OfEk7oRUTFDAz9CfVfsnQ8lXM3csXH+HOry Jzrt5CxH527e8cd6p6ZwIA8CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRjDvyLyCR/ maASgHQeShoNt/FHsDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkI2MjkvRTJDRjk0MEE0NUI0MTFFRjhGREI3NDFEQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUJCNjI5L0UyQ0Y5NDBBNDVCNDExRUY4RkRCNzQxREM0RjlBRTAyL1l3NzhpOGdr ZjVtZ0VvQjBIa29hRGJmeFI3QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZ0KjDANBgkqhkiG9w0BAQsFAAOCAQEAg2QMHlLgUhOTTcqOWZUh 0Z/4g2T8V8xfu24uZR1RAQrNtTyTjDX7X2HjTDhkvmEbvLu1shKF1pLNXL0OdhuC bBRo6ai9Q938+Mh7lUT9ygHpVgvNR+/FT7lwElryQqjlWSYk6etNbav3G2VQV/oX Xwx4VwmftEoXPyBr88OgZeYu8i3yrg4whr/52Ju1vgxsA95rJwKcDK9qK3NyeGUC foHGxmMdcGrNP96nQukKG6RKTBeQgpUm0wAiUgRVMEBrq0lyNq3n0/ynFe9uH1Xk pSKomysDOYjDV7xRMryveY5rfHqhlMyBl1ndnH8iIkovuAbu1sH5lulx8RsXRDIp Zg== -----END CERTIFICATE-----Generated at Sun Jan 25 15:33:16 2026 by rpki-client